CVE-2009-1930

CVE-2009-1930 is a critical vulnerability affecting the Telnet service in multiple Microsoft Windows operating systems, including Windows 2000, XP, Server 2003, Vista, and Server 2008. This flaw allows a malicious Telnet server to replay a client's NTLM credentials, enabling arbitrary code execution on the client machine. With a CVSS score of 10.0, it represents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity and EPSS score, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.